When using KCD users always get presented with the Forms-Based Authentication page from Exchange for OWA and ECP
In certain situations when attempting configuring ESP for OWA or ECP access in Exchange (Edge Security Pack) and KCD (Kerberos Constrained Delegation) is set as the Server Side Authentication Protocol a user will always be presented with the Exchange Forms-Based Authentication (FBA) Page despite the fact that the client was able to successfully generate a KCD ticket. This article cover the steps required to resolve the issue server side on the Exchange Server.